[CDP-development] Phishing Activity Related to Permit Data – Awareness and Inquiry

[Destiny Fogarty-Olivas]

Dear Colleagues,

Kevin confirmed that I may use his distribution list, so I am reaching out for two purposes:

  1.  to raise awareness, and
  2.  to determine whether anyone else has encountered similar activity.

Our organization uses a permitting platform called Accela to provide permit-related information to our community.

In November, our Land Use and Transportation team received a notification from the State regarding malicious actors harvesting permit data for use in a phishing campaign. Thankfully!

Yesterday, we experienced two related incidents. In one instance, a customer shared the phishing email they received (attached). In another, a customer visited our office to pay an invoice they received from the “county” via email; however, no such invoice existed in our system.

Looking at the attached, the sending domain in the email is clearly fraudulent: Planning.WashingtonCountyor at usa.com. Additionally, our Planning Commission does not handle permits, nor do they process payments and the Director’s name, while correct has the last name with a lower case letter.

Has anyone else encountered this phishing campaign within their jurisdiction? If not, please consider this an early awareness notice.

Thank you for your time. If you have any questions, feel free to reach out.

Sincerely,

[cid:image001.jpg at 01DCD739.8F5AC2F0]

Destiny Fogarty-Olivas · she/her/hers
Information Security Officer, ITS
971-439-9491
Destiny_Fogarty-Olivas at washingtoncountyor.gov<mailto:Destiny_Fogarty-Olivas at washingtoncountyor.gov>
The opposite of curiosity is conformity

CONFIDENTIALITY NOTICE: The information contained in this communication is confidential and is only for use by the intended recipient. If the reader of this communication is not the intended recipient (or the agent or employee responsible for delivering it to the intended recipient), you are hereby notified that any dissemination, distribution, or reproduction of this communication is strictly prohibited. If you have received this communication in error, please immediately notify the sender by e-mail and delete this communication from your system. Thank you.





INFO: Washington County email address has changed from @co.washington.or.us to @washingtoncountyor.gov. Please update my contact information.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://omls.oregon.gov/pipermail/cdp-development/attachments/20260429/675bfa37/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 4831 bytes
Desc: image001.jpg
URL: <https://omls.oregon.gov/pipermail/cdp-development/attachments/20260429/675bfa37/attachment-0001.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: FW_ [EXTERNAL] FW_ Action Required_ Settlement of Application Review and Approval Fee 1 (1)_Redacted.pdf
Type: application/pdf
Size: 126874 bytes
Desc: FW_ [EXTERNAL] FW_ Action Required_ Settlement of Application Review and Approval Fee 1 (1)_Redacted.pdf
URL: <https://omls.oregon.gov/pipermail/cdp-development/attachments/20260429/675bfa37/attachment-0001.pdf>